GithubHelp home page GithubHelp logo

soos-io / soos-ci-analysis-circleci-orb Goto Github PK

View Code? Open in Web Editor NEW
2.0 0.0 2.0 35 KB

SOOS SCA for CircleCI

Home Page: https://soos.io/

License: MIT License

Shell 100.00%
securiy vulnerability-scanners vulnerability-detection vulnerability vulnerabilities soos sca security-tools security-audit circleci

soos-ci-analysis-circleci-orb's People

Contributors

ecpeden avatar gregjoeval avatar soos-gsteen avatar soos-jalvarez avatar soos-jjennings avatar

Stargazers

 avatar

Forkers

soos-uredi

soos-ci-analysis-circleci-orb's Issues

CircleCI Partner Review

Hello SOOS team ๐Ÿ‘‹

I am from the @circleci Community and Partner Engineering team, here to help with a review for the CircleCI orb partnership. I have a few action items below for you:

Changes:

  • Remove unnecessary parameters from the executor provided:

Unless I am missing something, the only parameter you require in your executor is the tag. The rest are only used in your jobs/command.

  • Fix tag parameter description:

Your parameter description mentions node. I believe this should be python based on the executor's name and docker image.

  • Consider changing the on_failure parameter to enum or link to docs with the parameter's options:

It sounds like this parameter has multiple options, but I couldn't easily find the accepted arguments in the orb or your docs. It's a good idea to make it an enum and/or insert the docs URL in the parameter description (example) for more information.

  • Change the mode parameter to enum.

You did an excellent job explaining the valid arguments, and I believe you could further enforce them by making this parameter an enum.

  • Remove empty spaces between jobs parameters and requires.

Remove the lines: 206 and 270.

  • Remove the mode parameter options and their explanations from the soos-analysis job description.

The options are listed and explained in the parameter description. There is no need to duplicate this information in the job description.

Optional:

  • Consider writing your orb using CircleCI's Orb Development Kit. It will increase your orb's maintainability and make it easier to extend its functionality in the future, should it be needed.

Questions:

  • I can see some parameters in the command that are not explicitly used in your orb. Some examples are SOOS_BUILD_URI and SOOS_OPERATING_ENVIRONMENT. Do they serve any purpose?

After addressing the issues above, please provide us with a successful run link. Should you have any questions, feel free to post them here, and I'll be happy to help!

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.